Security updates will only be applied to the latest version of Cowsay. Any older significant versions (i.e., 4.0, 3.0) will not receive security updates.
Please join our Discord server and contact any of the members with the "Developer" role directly if you believe you have found a security vulnerability.